# OpenGhost

[](https://skills.sh/VAIBHAVSING/openghost) [](LICENSE) [](skills/openghost-skill/SKILL.md)

Agent Skill for authorized web application and supporting server integrity penetration testing.

OpenGhost helps an AI coding agent run a scoped security assessment. The agent plans the work, tests carefully, validates evidence, and writes findings. OpenGhost provides the Docker sandbox, scope files, evidence folders, reusable checks, and report templates.

OpenGhost is fully local and open source. It has no hosted service, account, API key, telemetry requirement, or managed control plane.

> [!IMPORTANT] > Use OpenGhost only on systems you are explicitly authorized to test. > > Write the allowed targets, exclusions, accounts, rate limits, test windows, > emergency contacts, and rules of engagement into the generated scope file > before active testing.

## How to Use

Install the skill with the [skills](https://skills.sh/) CLI:

```bash npx skills@latest add https://github.com/VAIBHAVSING/openghost --skill openghost-skill ```

Then ask your agent to use OpenGhost for an authorized assessment:

```text Use $openghost-skill to assess https://target.example. Authorization and scope details are in the engagement notes. ```

Make sure Docker is running and Bash 4.3+ plus Python 3 are available. Security tools are executed through the OpenGhost sandbox, not directly on your host machine.

<details> <summary>Use from a local checkout</summary>

```bash git clone https://github.com/VAIBHAVSING/openghost.git cd openghost export PATH="$PWD/skills:$PWD/skills/openghost-skill:$PATH" openghost help ```

</details>

<details> <summary>Use with Codex or another Agent Skills client</summary>

Prefer the `skills` CLI install command above. If you install manually, copy the skill f